asvd/jailed

Health v2 · maintenance only

Adoption not part of the score

1026 stars · 66 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Jailed is a small dependency-free JavaScript library for executing untrusted code in a sandbox with custom permissions. It runs code as a restricted subprocess in Node.js or inside a sandboxed iframe web-worker in the browser, communicating via message-based function exports.

Use cases

• safely execute user-submitted JavaScript code
• run untrusted code in a sandbox with restricted permissions
• embed third-party plugins with a limited API surface
• export specific functions into a sandboxed environment
• execute code from a string or file in an isolated worker
• build an isomorphic sandbox that works in Node.js and the browser

When to choose

• you need to run untrusted or third-party JavaScript with fine-grained function-level permissions
• you want a lightweight, dependency-free sandbox that works in both Node.js and browsers
• you need to interrupt or control plugin execution from the host application

When to avoid

• you need strong security guarantees against determined attackers, since iframe/subprocess sandboxing can be bypassed in some environments
• you need high-performance synchronous communication with sandboxed code
• the project appears unmaintained and may not receive security fixes

Facets

library · maturity maintenance

security plugin-system serialization security developer-tools web-development browser sandbox untrusted-code isomorphic web-worker iframe-sandbox capability-based-security nodejs javascript

Member repositories

For agents

markdown · JSON · MCP: product_card(name="asvd/jailed")